NEW BOT Телеграм, страница

ISACARuSec

NIST has just released the second public draft of Special Publication (SP) 800-161 Revision 1, Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations, for public comment.

SP 800-161 Rev. 1 (Draft), C-SCRM Practices for Systems and Organizations | CSRC
https://csrc.nist.gov/publications/detail/sp/800-161/rev-1/draft

CSRC | NIST

NIST Special Publication (SP) 800-161 Rev. 1 (Withdrawn), Cyber Supply Chain Risk Management Practices for Systems and Organizations

Organizations are concerned about the risks associated with products and services that may contain potentially malicious functionality, are counterfeit, or are vulnerable due to poor manufacturing and development practices within the cyber supply chain. These…

380 viewsedited 04:27

ISACARuSec

https://www.ibm.com/resources/guides/cyber-resilient-organization-study/

IBM

Cyber Resilient Organization Study 2021

383 views04:46

ISACARuSec

346 views04:46

ISACARuSec

352 views04:46

ISACARuSec

https://www.bleepingcomputer.com/news/security/nsa-and-cisa-share-guidance-on-securing-5g-cloud-infrastructure/

BleepingComputer

NSA and CISA share guidance on securing 5G cloud infrastructure

CISA and the NSA shared guidance on securing cloud-native 5G networks from attacks seeking to compromise information or deny access by taking down cloud infrastructure.

356 views04:53

ISACARuSec

https://twitter.com/virustotal/status/1453379508338298883

Twitter

VirusTotal

Today we are excited to introduce our brand new VirusTotal MSSP program. Partner with us to differentiate and enrich your offering. Learn everything about it here: blog.virustotal.com/2021/10/introd…

382 viewsedited 04:57

ISACARuSec

https://news.sophos.com/en-us/2021/10/28/the-top-10-ways-ransomware-operators-ramp-up-the-pressure-to-pay/

Sophos News

The Top 10 Ways Ransomware Operators Ramp Up the Pressure to Pay

Ransomware operators don’t just target systems and data, they target people in their ever-increasing efforts to get the victim to pay

407 views05:01

ISACARuSec

https://twitter.com/ITguySoCal/status/1453800115743821837

Twitter

Joe Stocker

Microsoft just released a new Ninja Training module (free) for Microsoft Information Protection. aka.ms/MIPNinja MIP Ninja Training Announcement: techcommunity.microsoft.com/t5/security-co… Follow thread below for the Complete list of all Ninja training (1/x)

434 viewsedited 15:23

ISACARuSec

Forwarded from Пост Лукацкого

Google, SFDC, Okta, Slack и другие разработали минимальный набор требований ИБ к корпоративному ПО или поставщикам услуг аутсорсинга бизнес-функций https://t.co/qu5Z9XWNjb
— Alexey Lukatsky (@alukatsky) Oct 29, 2021

162 views15:37

ISACARuSec

Учитывая что в современном мире цифровизацией занимаются все кто могут набор минимальных требований по ИБ для прототипов (mvp) это весьма актуально.

443 viewsedited 03:56

ISACARuSec

https://mvsp.dev/mvsp.en/index.html

mvsp.dev

Minimum Viable Secure Product - Controls

Minimum Viable Secure Product is a minimalistic security checklist for B2B software and business process outsourcing suppliers.

498 views03:59

ISACARuSec

https://twitter.com/ISACANews/status/1454127799036436487